QUESTIONNAIRE DATA PROTECTION LAW -RWANDA

Size: px
Start display at page:

Download "QUESTIONNAIRE DATA PROTECTION LAW -RWANDA"

Transcription

1 QUESTIONNAIRE DATA PROTECTION LAW -RWANDA Introduction The following Questionnaire pertains to certain considerations impacting the development of data protection law in your country. Data protection laws are enacted to safeguard the rights of privacy and protection of personal or sensitive information of individuals. Such laws may include data protection principles against to handlers of personal information must adhere. The law may be a single designated legislation alternatively data protection requirements may appear in electronic commerce legislation, consumer protection legislation, telecommunications legislation. Specific countries have a dedicated data or information protection regulator. Data protection laws may or may not result from data protection policy in the country. Kindly answer the following questions from the perspective of your organisation and/or industry (or sector) to assist with the provision of information and context relevant to the consideration of the appropriate legal provisions for data protection in Rwanda. *Please use the term industry and sector interchangeably when answering the questionnaire Respondent Details Organisation : Industry/ Sector: - 1 -

2 1. In general terms, is a law on the protection of personal information necessary in Rwanda? Why? 2. In the context of your organisation, what personal information of your stakeholders is collected? Please list categories of personal information such as name, address, addresses etc. a. b. c. d. e. f. g. h. i. j. k. l. m. n. o. p. 3. How is such information collected? (Please explain) a. Forms? b. Online Processes? c. Other 4. Describe the purposes of collection and use of the personal information? Is the personal information used only for the purpose of collection or further purposes? (Please explain) 5. Does your organisation collect more personal information from stakeholders than necessary? (If yes, please explain the reasons) - 2 -

3 6. Should your organisation obtain consent from your stakeholders for the use of their personal information? (Please explain) 7. Does your organisation share such personal information with third party organisations? (If yes, explain) 8. Should your organisation obtain consent before sharing personal information with third parties? (Please explain) 9. Regarding the personal information specified in your response to question 2 above, which categories would you regard as sensitive personal information? Why? 10. Should your stakeholders (whose personal information you hold) have the rights to: (Please explain your answers) a. Receive notification of the reasons that you collect their personal information? - 3 -

4 b. Access the personal information from your records (request that your organisation be transparent about their personal information held?) c. Request that your organisation rectify any incorrect personal information held? d. Object to the use of their personal information? e. Request that their personal information be deleted from your records? f. Request that their personal information not be disclosed to third parties? 11. With respect to your answers to question 10, explain any negative impacts if your data subjects were granted such rights? 12. Is there a need for mandatory security safeguards to be applied to the protection of personal information held by an organisation? Please explain

5 13. Is there a need to govern the exchange of personal information of your stakeholders with organisations outside of Rwanda? (Please explain) 14. Please describe any specific protection of personal information regarding your stakeholders that you would like to see in the data protection legal provisions to be developed? 15. Please describe particular: a. concerns regarding the treatment of personal information in your industry? b. incidents of violations of privacy of stakeholders in your industry? 16. Is the privacy or protection of personal information of your stakeholders addressed in other laws or legal instruments specific to your organisation or industry? a. Other substantive data protection laws (e.g. laws prohibiting unauthorised collection, access or use of personal information, laws in your industry): (f yes, please list/ explain) - 5 -

6 b. International or Regional Directives, Treaties, Cooperation and Mutual legal assistance related to your industry or organisation: Yes No *If yes, kindly indicate the date of effect of such directives, treaties, decrees of co-operation. c. Self Regulatory Mechanisms (e.g. codes of conduct or industry body rules) 17. In your view, should a unit/department/entity be established by government to deal with data (information) protection? (Please explain.) 18. Should organisations be required to notify a government authority of: a. The categories and purpose of personal information processed b. Incidents of security breaches concerning personal information for which an organisation is responsible 19. What, in your view, would be the appropriate penalties or sanctions where personal information protection standards prescribed by legislation are not met? 20. Additional Notes/ Comments: (Please feel free to input general notes/ comments) - 6 -

7 - 7 -

General Data Protection Regulation. What should community energy organisations be doing to prepare?

General Data Protection Regulation. What should community energy organisations be doing to prepare? General Data Protection Regulation What should community energy organisations be doing to prepare? The implementation date of 25 May 2018 for the General Data Protection Regulation (GDPR) is fast approaching.

More information

New General Data Protection Regulation - an introduction

New General Data Protection Regulation - an introduction New General Data Protection Regulation - an introduction Netnod spring meeting 2017 Johan Hübner, Partner, Advokat Erika Hammar, Associate Agenda Background Why you need to care about the new data privacy

More information

Data Protection Policy

Data Protection Policy Preston and District Data Protection Policy The University of the Third Age Scope of the policy This policy applies to the work of Preston & District U3A (hereafter the U3A ). The policy sets out the requirements

More information

Data protection (GDPR) policy

Data protection (GDPR) policy Data protection (GDPR) policy January 2018 Version: 1.0 NHS fraud. Spot it. Report it. Together we stop it. Version control Version Name Date Comment 1.0 Trevor Duplessis 22/01/18 Review due Dec 2018 OFFICIAL

More information

Customer Data Protection. Temenos module for the General Data Protection Regulation (GDPR)

Customer Data Protection. Temenos module for the General Data Protection Regulation (GDPR) Customer Data Protection Temenos module for the General Data Protection Regulation (GDPR) Contents Glossary 03 GDPR Geographical Scope 03 GDPR implementation status 03 Overview of GDPR 03 Financial Institutions

More information

Humber Information Sharing Charter

Humber Information Sharing Charter External Ref: HIG 01 Review date November 2016 Version No. V07 Internal Ref: NELC 16.60.01 Humber Information Sharing Charter This Charter may be an uncontrolled copy, please check the source of this document

More information

Data Protection Policy & Procedures

Data Protection Policy & Procedures Data Protection Policy & Procedures Scope In this document, the terms we, us, our and/or Clear Sky refer to Clear Sky Children s Charity. The term you and/or your refer to all employees of Clear Sky, who

More information

A Path to Social Licence

A Path to Social Licence August 2017 A Path to Social Licence Guidelines for Trusted Data Use A Path to Social Licence Guidelines for Trusted Data Use 1 1 2 August 2017 A Path to Social Licence Guidelines Summary for June August

More information

Data Protection. Policy

Data Protection. Policy Data Protection Policy Why do we need this policy? What does the policy apply to? Which parts of SQA are affected? SQA is committed to adopting best practice in protecting the personal information of all

More information

PREPARING YOUR ORGANISATION FOR THE GENERAL DATA PROTECTION REGULATION YOUR READINESS CHECKLIST DATA PROTECTION COMMISSIONER

PREPARING YOUR ORGANISATION FOR THE GENERAL DATA PROTECTION REGULATION YOUR READINESS CHECKLIST DATA PROTECTION COMMISSIONER PREPARING YOUR ORGANISATION FOR THE GENERAL DATA PROTECTION REGULATION YOUR READINESS CHECKLIST DATA PROTECTION COMMISSIONER 1 What will the GDPR mean for your business/organisation? On the 25 th May 2018,

More information

Privacy Policy PURPOSE SCOPE POLICY. Data Collection

Privacy Policy PURPOSE SCOPE POLICY. Data Collection Privacy Policy PURPOSE 1. To ensure Training & Assessment Mentor maintains the privacy of personal information provided to Training & Assessment Mentor from Staff and Students. SCOPE 2. This document describes

More information

WHAT PAYROLL PROFESSIONALS NEED TO KNOW ABOUT THE GENERAL DATA PROTECTION

WHAT PAYROLL PROFESSIONALS NEED TO KNOW ABOUT THE GENERAL DATA PROTECTION WHAT PAYROLL PROFESSIONALS NEED TO KNOW ABOUT THE GENERAL DATA PROTECTION REGULATION (GDPR) WHAT PAYROLL PROFESSIONALS NEED TO KNOW ABOUT THE GENERAL DATA PROTECTION REGULATION (GDPR) Published by: The

More information

The implications of the EU General Data Protection Regulation 2016 for ICT Disposal

The implications of the EU General Data Protection Regulation 2016 for ICT Disposal The implications of the EU General Data Protection Regulation 2016 for ICT Disposal (and how ADISA Certification helps data processors and data controllers meet changing regulations) Author: Steve Mellings

More information

Corporate Compliance Policy

Corporate Compliance Policy Corporate Compliance Policy EFFECTIVE DATE. 28 March 2017 1 Preface By Mikael Lundin, CEO, Nord Pool Dear employees, Welcome to Nord Pool s Corporate Compliance Policy. Our compliance framework forms the

More information

The Committee of Ministers, under the terms of Article 15.b of the Statute of the Council of Europe,

The Committee of Ministers, under the terms of Article 15.b of the Statute of the Council of Europe, Recommendation CM/Rec(2015)5 of the Committee of Ministers to member States on the processing of personal data in the context of employment (Adopted by the Committee of Ministers on 1 April 2015, at the

More information

Slavery and Human Trafficking Statement 2016

Slavery and Human Trafficking Statement 2016 Temenos Group AG At Temenos, we are committed to achieving business excellence and long-term value through superior financial performance while managing our operations in a responsible and sustainable

More information

General Data Protection Regulation (GDPR) A brief guide

General Data Protection Regulation (GDPR) A brief guide General Data Protection Regulation (GDPR) A brief guide Document compiled by: Terence Clark & Dr. Nathan Matthews June 2017 Acknowledgements This document contains material from the Information Commissioner

More information

ARTICLE 29 DATA PROTECTION WORKING PARTY

ARTICLE 29 DATA PROTECTION WORKING PARTY ARTICLE 29 DATA PROTECTION WORKING PARTY 17/EN WP 256 Working Document setting up a table with the elements and principles to be found in Binding Corporate Rules (updated) Adopted on 29 November 2017 INTRODUCTION

More information

EU General Data Protection Regulation (GDPR) A Point of View. For private circulation only. Risk Advisory

EU General Data Protection Regulation (GDPR) A Point of View. For private circulation only. Risk Advisory EU General Data Protection Regulation (GDPR) A Point of View For private circulation only Risk Advisory Preface Does the EU GDPR impact organisations in India? Yes! This new law will have a profound impact

More information

DATA PROTECTION POLICY

DATA PROTECTION POLICY DATA PROTECTION POLICY 1. Introduction This policy sets out how The Robert Gordon University shall comply with the requirements of the Data Protection Act 1998 and was created with reference to the JISC

More information

DATA PROTECTION POLICY 2016

DATA PROTECTION POLICY 2016 DATA PROTECTION POLICY 2016 ADOPTED FROM BRADFORD METROPOLITAIN COUNCIL MODEL POLICY AUTUMN 2016 To be agreed by Governors on; 17/10/16 Signed by Chair of Governors: Statutory policy: Yes Frequency of

More information

Memorandum of understanding between the Competition and Markets Authority and the Office of Communications concurrent competition powers

Memorandum of understanding between the Competition and Markets Authority and the Office of Communications concurrent competition powers 8 February 2016 Memorandum of understanding between the Competition and Markets Authority and the Office of Communications concurrent competition powers Contents Page Foreword... 2 Memorandum of Understanding

More information

What you need to know. about GDPR. as a Financial Broker. Sponsored by

What you need to know. about GDPR. as a Financial Broker. Sponsored by What you need to know about GDPR as a Financial Broker Dear Partner The regulatory and compliance environment is ever changing and the burden and requirements on financial services professionals continues

More information

GRIEVANCE POLICY. NHS Ayrshire and Arran Organisation & Human Resource Development Policy. Policy Reference HRP/013

GRIEVANCE POLICY. NHS Ayrshire and Arran Organisation & Human Resource Development Policy. Policy Reference HRP/013 NHS Ayrshire and Arran Organisation & Human Resource Development Policy GRIEVANCE POLICY Policy Reference HRP/013 Reviewers Name Group/Name(s) Date Policy Review Group Scott Semple July 2013 Lead Responsibility

More information

Privacy governance survey. The state of privacy management in Belgian organisations

Privacy governance survey. The state of privacy management in Belgian organisations Privacy governance survey The state of privacy management in Belgian organisations January 2017 Welcome How are Belgian organisations performing when it comes to the protection of personal data? In November

More information

Data Protection Policy

Data Protection Policy Data Protection Policy for The Astor Bannerman Group of Companies Issue Date: 3 rd January 2014 Version: 01 Approval History Name Department Role/Position Date approved Signature James Stuart- Smith Director

More information

The General Data Protection Regulation and associated legislation. Part 1: Guidance for Community Pharmacy. Version 1: 25th March 2018

The General Data Protection Regulation and associated legislation. Part 1: Guidance for Community Pharmacy. Version 1: 25th March 2018 The General Data Protection Regulation and associated legislation Part 1: Version 1: 25th March 2018 Introduction The General Data Protection Regulation and, when enacted, the Data Protection Act 2018

More information

EU General Data Protection Regulation (GDPR) A Point of View for Technology Sector Organisations. For private circulation only.

EU General Data Protection Regulation (GDPR) A Point of View for Technology Sector Organisations. For private circulation only. EU General Data Protection Regulation (GDPR) A Point of View for Technology Sector Organisations For private circulation only Risk Advisory Preface Does the EU GDPR impact organisations in India? Yes!

More information

EU data protection reform

EU data protection reform EU data protection reform Background and insight A Whitepaper Executive summary The Irish Data Protection Acts 1988 and 2003 gave effect to the European Data Protection Directive 95/46/EC. The existing

More information

2017 Study Report on User Control over Personal Data in Customer Loyalty and Reward Programmes

2017 Study Report on User Control over Personal Data in Customer Loyalty and Reward Programmes 2017 Study Report on User Control over Personal Data in Customer Loyalty and Reward Programmes 18 December 2017 Table of Contents I. Executive Summary... 2 II. Objectives of the Sweep... 3 III. Methodology

More information

with Xavier Darmstaedter Managing Partner GEDAPRE DACOTA Consulting

with Xavier Darmstaedter Managing Partner GEDAPRE DACOTA Consulting with Xavier Darmstaedter Managing Partner GEDAPRE DACOTA Consulting xada@gedapre.eu tel 0475-41.03.22 xavier.darmstaedter@dacota.eu Gent, 3 October 2017 4 facts 1. We are not really in control of our personal

More information

Brookfield Renewable Energy Partners L.P. CODE OF BUSINESS CONDUCT AND ETHICS

Brookfield Renewable Energy Partners L.P. CODE OF BUSINESS CONDUCT AND ETHICS Brookfield Renewable Energy Partners L.P. CODE OF BUSINESS CONDUCT AND ETHICS TABLE OF CONTENTS WHO WE ARE 1 1. APPLICATION & COMMUNICATION OF THE CODE 2 1.1 Who the Code applies to 2 1.2 The Code and

More information

ACCENTURE BINDING CORPORATE RULES ( BCR )

ACCENTURE BINDING CORPORATE RULES ( BCR ) ACCENTURE BINDING CORPORATE RULES ( BCR ) EXECUTIVE SUMMARY INTRODUCTION Complying with data privacy laws is part of Accenture s Code of Business Ethics (COBE). In line with our COBE, we implement recognized

More information

EU General Data Protection Regulation, a new era in data protection

EU General Data Protection Regulation, a new era in data protection EU General Data Protection Regulation, a new era in data protection The European Union data privacy landscape is about to undergo dramatic change, with lasting enterprise wide implications for the way

More information

Auditing of Swedish Enterprises and Organisations

Auditing of Swedish Enterprises and Organisations Auditing of Swedish Enterprises and Organisations March 1st 2018 version 2018:1 1 General Application 1.1 These General Terms govern the relationship between the auditor ( the Auditor ) and the client

More information

Humber Information Sharing Charter

Humber Information Sharing Charter External Ref: HIG 01 Insert here the logo of the signatory organisation Review date November 2016 Version No. V07 Internal Ref: ERYC CFS ILS 02 Humber Information Sharing Charter This Charter may be an

More information

Intergovernmental Committee on Intellectual Property and Genetic Resources, Traditional Knowledge and Folklore

Intergovernmental Committee on Intellectual Property and Genetic Resources, Traditional Knowledge and Folklore E WIPO/GRTKF/IC/30/4 ORIGINAL: ENGLISH DATE: MARCH 9, 2016 Intergovernmental Committee on Intellectual Property and Genetic Resources, Traditional Knowledge and Folklore Thirtieth Session Geneva, May 30

More information

General Data Protection Regulation. The changes in data protection law and what this means for your church.

General Data Protection Regulation. The changes in data protection law and what this means for your church. General Data Protection Regulation The changes in data protection law and what this means for your church. 1 Contents Page 5 Page 6 Page 7 Page 8 Page 9 Page 10 Page 11 Page 12 Page 18 Page 20 Page 23

More information

The Sage quick start guide for businesses

The Sage quick start guide for businesses General Data Protection Regulation (GDPR): The Sage quick start guide for businesses Contents Introduction 3 Infographic: GDPR at a Glance 4 The basics 5 The GDPR in summary 5 Individual rights and informing

More information

Data Protection Policy

Data Protection Policy Reference: Date Approved: April 2015 Approving Body: Board of Trustees Implementation Date: August 2015 Supersedes: 2.0 Stakeholder groups Governance Committee, Board of Trustees consulted: Target Audience:

More information

GENERAL TERMS AND CONDITIONS FOR USING THE JUVENTUS eprocurement PORTAL

GENERAL TERMS AND CONDITIONS FOR USING THE JUVENTUS eprocurement PORTAL GENERAL TERMS AND CONDITIONS FOR USING THE JUVENTUS eprocurement PORTAL 1 INTRODUCTION JUVENTUS Football Club S.p.A. (hereinafter "JUVENTUS") is data controller of JUVENTUS eprocurement, an e-business

More information

CODE OF ETHICS GUIDELINES FOR ORGANISATION, MANAGEMENT AND CONTROL

CODE OF ETHICS GUIDELINES FOR ORGANISATION, MANAGEMENT AND CONTROL CODE OF ETHICS GUIDELINES FOR ORGANISATION, MANAGEMENT AND CONTROL La Sportiva S.P.A. is one of the market leaders in the production and sale of footwear: mountain footwear, hiking, climbing and mountain

More information

Processing of personal data in a trust network for electronic identification

Processing of personal data in a trust network for electronic identification Recommendation Processing of personal data in a trust network for electronic identification Annex to FICORA Regulation Recommendation 1 (10) Contents 1 Introduction... 3 2 TRUST NETWORK AND ITS OPERATION...

More information

UK Research and Innovation (UKRI) Data Protection Policy

UK Research and Innovation (UKRI) Data Protection Policy UK Research and Innovation (UKRI) Data Protection Policy Document Information Revision History Version Comment Date By 0.1 Draft Policy created July 2017 DH 0.2 Revision post review by information manager

More information

EUSWM01 Manage the reception of waste

EUSWM01 Manage the reception of waste Overview This national occupational standard defines the competences required for managing the procedures for receiving waste and controlling its reception, inspection and validation. It requires the implementation

More information

GDPR readiness for start-ups, technology businesses and professional practices Martin Cassey

GDPR readiness for start-ups, technology businesses and professional practices Martin Cassey www.nascenta.com GDPR readiness for start-ups, technology businesses and professional practices Martin Cassey Introduction GDPR Key Points GDPR/DPA Differences Start Up, Tech Business Professional Practice?

More information

THE GENERAL DATA PROTECTION REGULATION: A BRIEF OVERVIEW (*)

THE GENERAL DATA PROTECTION REGULATION: A BRIEF OVERVIEW (*) THE GENERAL DATA PROTECTION REGULATION: A BRIEF OVERVIEW (*) The first IBM Personal Computer was introduced just over 35 years ago, on August 12, 1981. The first-generation iphone was introduced in the

More information

GDPR Best Practices Implementation Guide. Transforming GDPR Requirements into Compliant Operational Behaviours

GDPR Best Practices Implementation Guide. Transforming GDPR Requirements into Compliant Operational Behaviours GDPR Best Practices Implementation Guide Transforming GDPR Requirements into Compliant Operational Behaviours 01 02 Introduction The General Data Protection Regulation (GDPR) is a revolutionary change

More information

Social Networking. Management Guide. Compliance and Legal Services

Social Networking. Management Guide. Compliance and Legal Services Social Networking Management Guide Compliance and Legal Services Table of Contents IU Health Policies... 3 ADM 1.13 Standards of Conduct for Business Practices ADM 1.98 Information Security Incident Response

More information

A Comparison of the Recent FTC and Commerce Department Data Privacy Frameworks

A Comparison of the Recent FTC and Commerce Department Data Privacy Frameworks A Comparison of the Recent FTC and Commerce Department Data Privacy Frameworks By Lydia Parnes & Edward Holman As the IAPP enters its second decade, the privacy landscape in the U.S. is undergoing a major

More information

GDPR Compliance Checklist

GDPR Compliance Checklist GDPR Compliance Checklist GDPR Compliance Checklist This GDPR Compliance Checklist sets out the key requirements that the General Data Protection Regulation will introduce into EU Privacy law on 25 May

More information

Depending on the circumstances, we may collect, store, and use the following categories of personal information about you:

Depending on the circumstances, we may collect, store, and use the following categories of personal information about you: Ignata Group Data Protection / Privacy Notice What is the purpose of this document? Ignata is committed to protecting the privacy and security of your personal information. This privacy notice describes

More information

GDPR Factsheet - Key Provisions and steps for Compliance

GDPR Factsheet - Key Provisions and steps for Compliance GDPR Factsheet - Key Provisions and steps for Compliance Organisations in the Leisure & Hospitality industry hold vast amounts of personal data relating to customers, employees, and suppliers as well as

More information

EU General Data Protection Regulation (GDPR) Point of View for ERP and HRMS Operations. For private circulation only.

EU General Data Protection Regulation (GDPR) Point of View for ERP and HRMS Operations. For private circulation only. EU General Data Protection Regulation (GDPR) Point of View for ERP and HRMS Operations For private circulation only Risk Advisory Preface Does the EU GDPR impact organisations in India? Yes! This new law

More information

What is GDPR and Should You Care?

What is GDPR and Should You Care? What is GDPR and Should You Care? Ingram Micro Inc. 1 Overview of Privacy Climate & Concerns 2 2 Today We Live In A World Where Advertisers read key words in your Facebook posts and emails and decide what

More information

Information Asset Management Policy

Information Asset Management Policy Information Asset Management Policy 1.0 Purpose 1.1 The purpose of this policy is to outline the management of the Fund s information asset register and the actions that will be taken to provide sufficient

More information

Vendor Agreements and the New EU GDPR Steps to Take Now

Vendor Agreements and the New EU GDPR Steps to Take Now Presenting a live 90-minute webinar with interactive Q&A Vendor Agreements and the New EU GDPR Steps to Take Now Complying With the EU General Data Protection and Privacy Regulation TUESDAY, JANUARY 30,

More information

Tourettes Action Data Protection Policy

Tourettes Action Data Protection Policy Tourettes Action Data Protection Policy Effective date: 01/01/2018 Review date: 01/01/2020 Approved: Suzanne Dobson, CEO Tourettes Action Author: Pippa McClounan, Office Manager Tourettes Action Version

More information

The Compliance- Heroes of HARTMANN. Code of Conduct 3 rd edition

The Compliance- Heroes of HARTMANN. Code of Conduct 3 rd edition The Compliance- Heroes of HARTMANN Code of Conduct 3 rd edition MAN-M5.2-01 Code of Conduct, Version 1.0. Valid from January, 01, 2017. HARTMANN Our Mission, our Values, our Code of Conduct. HARTMANN is

More information

Identity Provider Policy. Identity and Authentication Services (IA Services)

Identity Provider Policy. Identity and Authentication Services (IA Services) Identity Provider Policy Identity and Authentication Services (IA Services) Table of Contents 1 Background... 1 1.1 ehealth Ontario Identity Federation... 1 1.2 Purpose... 1 1.3 Objectives... 1 1.4 Scope

More information

PERSONAL DATA PROTECTION POLICY

PERSONAL DATA PROTECTION POLICY PERSONAL DATA PROTECTION POLICY 1. Reasons 2. Principles and rights of personal data protection 3. Personal data protection policy 3.1 Purpose 3.2 Scope of application 3.3 Commitments 4. Responsibilities

More information

RECORDS MANAGEMENT POLICY AND PROCEDURES

RECORDS MANAGEMENT POLICY AND PROCEDURES Purpose This policy is designed to ensure that CAC maintains a systematic, compliant approach to effective management of all records. The policy affirms CAC s commitment in compliance with the standards

More information

Sławek Górniak ENISA. 8 th ETSI Security Workshop Sophia Antipolis, 16 th January 2013

Sławek Górniak ENISA. 8 th ETSI Security Workshop Sophia Antipolis, 16 th January 2013 ENISA Enhancing data protection in the EU Sławek Górniak ENISA slawomir.gorniak@enisa.europa.eu 8 th ETSI Security Workshop Sophia Antipolis, 16 th January 2013 Development of attacks Attacks on CIIP Effectiveness

More information

General Optical Council. Data Protection Policy

General Optical Council. Data Protection Policy General Optical Council Data Protection Policy Authors: Lisa Sparkes Version: 1.2 Status: Live Date: September 2013 Review Date: September 2014 Location: Internet / Intranet Document History Version Date

More information

INFRASTRUCTURE ONTARIO VENDOR PERFORMANCE PROGRAM

INFRASTRUCTURE ONTARIO VENDOR PERFORMANCE PROGRAM INFRASTRUCTURE ONTARIO VENDOR PERFORMANCE PROGRAM TABLE OF CONTENTS Preamble... 1 1. Definitions... 1 2. Purpose... 2 3. Evaluation of Vendor Performance... 3 3.1 Vendor Performance Scorecard... 3 3.2

More information

A Parish Guide to the General Data Protection Regulation (GDPR)

A Parish Guide to the General Data Protection Regulation (GDPR) A Parish Guide to the General Data Protection Regulation (GDPR) What s happening and why is it important? The law is changing. Currently, the Data Protection Act 1998 governs how you process personal data

More information

Questionnaire February 2010

Questionnaire February 2010 National Group: [P.R.CHINA] Contributors: Yong Cheng CCPIT PATENT & TRADEMARK LAW OFFICE Date: [March 2010] Questionnaire February 2010 Special Committees Q 94 WTO/TRIPS and Q166 Intellectual Property

More information

Comments on Chapter IV Part I Controller and processor 25/08/2015 Page 1

Comments on Chapter IV Part I Controller and processor 25/08/2015 Page 1 Comments on Chapter IV Part I Controller and processor 25/08/2015 Page 1 Bitkom represents more than 2,300 companies in the digital sector, including 1,500 direct members. With more than 700,000 employees,

More information

ECDPO 1: Preparing for the EU General Data Protection Regulation

ECDPO 1: Preparing for the EU General Data Protection Regulation ECDPO 1: Preparing for the EU General Data Protection Regulation GDPR comes with a raft of changes that will affect every organisation that process personal data. While some organizations are prepared

More information

How employers should comply with GDPR

How employers should comply with GDPR 02 Mind your business Prepare for GDPR How employers should comply with GDPR Recommendations for employer compliance with GDPR The scope of the impact of the GDPR cannot be overstated. The GDPR will impact

More information

GDPR transparency notice for candidates (contractors and permanents)

GDPR transparency notice for candidates (contractors and permanents) GDPR transparency notice for candidates (contractors and permanents) Electus Recruitment Solutions is the trading name of Electus Recruitment Solutions Limited (we), company number 04636093 and registered

More information

Regulates the way data controllers process personal data

Regulates the way data controllers process personal data GUIDANCE NOTE ON THE DATA PROTECTION ACT 1998 This guidance note gives an overview of how the Data Protection Act 1998 (the Act ) applies to clubs (including class associations) and recognised training

More information

Gwybodaeth Dan Reolaeth. Gwynedd Council DATA PROTECTION POLICY FINAL 2.0. September Information Management Service. Approved

Gwybodaeth Dan Reolaeth. Gwynedd Council DATA PROTECTION POLICY FINAL 2.0. September Information Management Service. Approved Gwybodaeth Dan Reolaeth Gwynedd Council DATA PROTECTION POLICY FINAL 2.0 September 2015 Information Management Service 1. Introduction The Council makes considerable use of personal information in all

More information

The General Data Protection Regulation (GDPR): Getting in good shape for the deadline Copenhagen, 19 September 2017 Janus Friis Bindslev Partner,

The General Data Protection Regulation (GDPR): Getting in good shape for the deadline Copenhagen, 19 September 2017 Janus Friis Bindslev Partner, The General Data Protection Regulation (GDPR): Getting in good shape for the deadline Copenhagen, 19 September 2017 Janus Friis Bindslev Partner, Deloitte, Cyber Advisory Table of Contents Introduction

More information

MRS Guidelines for MRS Company Partners: Qualitative Recruitment

MRS Guidelines for MRS Company Partners: Qualitative Recruitment MRS Guidelines for MRS Company Partners: Qualitative Recruitment CONSULTATION DRAFT 1 Introduction Over the years, questions have been asked about whether all qualitative recruiter practices are fully

More information

General Data Protection Regulation (GDPR) Frequently Asked Questions

General Data Protection Regulation (GDPR) Frequently Asked Questions General Data Protection Regulation (GDPR) Frequently Asked Questions 26 March 2018 0 Contents Introduction... 3 What is GDPR?... 3 Who does the GDPR apply to?... 3 Are tax advisers data controllers or

More information

General Data Protection Regulation and Episerver Learn how to leverage your organization s data to support GDPR compliance.

General Data Protection Regulation and Episerver Learn how to leverage your organization s data to support GDPR compliance. General Data Protection Regulation and Episerver Learn how to leverage your organization s data to support GDPR compliance. Page 2 What is General Data Protection Regulation? What The general data protection

More information

Data Protection Policy. Data protection. Date: 28/4/2018. Version: 1. Contents

Data Protection Policy. Data protection. Date: 28/4/2018. Version: 1. Contents Company Name: Document: Topic: System People ( the Company ) Data Protection Policy Data protection Date: 28/4/2018 Version: 1 Contents Introduction Definitions Data processing under the Data Protection

More information

THE EU GENERAL DATA PROTECTION REGULATION AND INTERNATIONAL AIRLINES SPECIAL UPDATE

THE EU GENERAL DATA PROTECTION REGULATION AND INTERNATIONAL AIRLINES SPECIAL UPDATE OCTOBER 2017 EU, COMPETITION, TRADE AND REGULATORY THE EU GENERAL DATA PROTECTION REGULATION AND INTERNATIONAL AIRLINES SPECIAL UPDATE The EU General Data Protection Regulation (GDPR) becomes effective

More information

SUPPLIER CODE OF CONDUCT

SUPPLIER CODE OF CONDUCT Feb 2016 SUPPLIER CODE OF CONDUCT Berry Plastics Corporation, its affiliates, divisions, and subsidiaries ( Berry ) strive to conduct business in a responsible manner. As we expand our business activities

More information

Presenting a live 90-minute webinar with interactive Q&A. Today s faculty features:

Presenting a live 90-minute webinar with interactive Q&A. Today s faculty features: Presenting a live 90-minute webinar with interactive Q&A Compliance With New EU GDPR: Steps Investment Funds, Banks, Advisers and Financial Intermediaries Should Take Now Revising Service Agreements and

More information

Project Title. Project Number. Privacy Impact Assessment

Project Title. Project Number. Privacy Impact Assessment Project Title Project Number Privacy Impact Assessment This document is classified as Official and is disclosable under the terms of the Freedom of Information Act. No part of the report should be disseminated

More information

Terms and Conditions for using BEA Credit Card in Digital Wallet

Terms and Conditions for using BEA Credit Card in Digital Wallet Terms and Conditions for using BEA Credit Card in Digital Wallet These Terms and Conditions for using your BEA Credit Card in Digital Wallet ("Terms and Conditions") apply when you choose to add a BEA

More information

GDPR. Legalities, Policies and Process Part 3 of our series on GDPR and its impact on the recruitment industry

GDPR. Legalities, Policies and Process Part 3 of our series on GDPR and its impact on the recruitment industry GDPR Legalities, Policies and Process Part 3 of our series on GDPR and its impact on the recruitment industry Who are we? Dillistone Group Plc, a public company listed on the AIM market of the London stock

More information

GDPR. https://www.eugdpr.org/eugdpr.org.html

GDPR. https://www.eugdpr.org/eugdpr.org.html GDPR https://www.eugdpr.org/eugdpr.org.html GDPR FAQs When is the GDPR coming into effect? Frequently Asked Questions about the incoming GDPR. The GDPR was approved and adopted by the EU Parliament in

More information

Guidelines on the protection of personal data in IT governance and IT management of EU institutions

Guidelines on the protection of personal data in IT governance and IT management of EU institutions Guidelines on the protection of personal data in IT governance and IT management of EU institutions Postal address: rue Wiertz 60 - B-1047 Brussels Offices: rue Montoyer 30 - B-1000 Brussels E-mail : edps@edps.europa.eu

More information

THE E-VERIFY PROGRAM FOR EMPLOYMENT VERIFICATION MEMORANDUM OF UNDERSTANDING ARTICLE I PURPOSE AND AUTHORITY

THE E-VERIFY PROGRAM FOR EMPLOYMENT VERIFICATION MEMORANDUM OF UNDERSTANDING ARTICLE I PURPOSE AND AUTHORITY THE E-VERIFY PROGRAM FOR EMPLOYMENT VERIFICATION MEMORANDUM OF UNDERSTANDING ARTICLE I PURPOSE AND AUTHORITY This Memorandum of Understanding (MOU) sets forth the points of agreement between the Department

More information

ARTICLE 29 Data Protection Working Party

ARTICLE 29 Data Protection Working Party ARTICLE 29 Data Protection Working Party 17/EN WP264 rev.01 Recommendation on the Standard Application for Approval of Controller Binding Corporate Rules for the Transfer of Personal Data Adopted on 11

More information

March Sorainen Law Offices.

March Sorainen Law Offices. Sorainen Law Offices www.sorainen.com Pärnu mnt. 15 10141 Tallinn, Estonia Tel: +372-6 651 880 Fax: +372-6 651 881 Email: sorainen@sorainen.ee Kr. Valdemara iela 21 LV1010 Riga, Latvia Tel: +371-7 365

More information

Compliance with South African POPI Acts

Compliance with South African POPI Acts Compliance with South African POPI Acts www.tdw.co.za Ebook Developed by Virginia Hendricks THE POPI ACT Ensuring that your organisation is abiding by both your own industry regulations and government

More information

Securitas Values and Ethics Code

Securitas Values and Ethics Code Securitas Values and Ethics Code 1. General Principles Abiding by laws, maintaining high ethical standards and upholding our shared values play a prominent role in all of Securitas operations and provide

More information

Data Protection Policy

Data Protection Policy Data Protection Policy Name of Chair: Mr David Mann Name of Headteacher: Mrs Eileen Bissell Name of person Responsible: Mrs Eileen Bissell Adopted and Agreed on: October 2015 Date of Review: October 2018

More information

Policy Document for: Data Protection (GDPR) Approved by Directors: September Due for Review: September Statement of intent

Policy Document for: Data Protection (GDPR) Approved by Directors: September Due for Review: September Statement of intent Policy Document for: Data Protection (GDPR) Approved by Directors: September 2017 Due for Review: September 2020 1. Statement of intent Timu Academy Trust is required to keep and process certain information

More information

Modern Slavery Policy

Modern Slavery Policy Rigid UK Policy DRUM, Stanley, Mansfield Modern Slavery Policy March 2017 Contents 1. Status of this policy 2. Why combatting forced labour matters 3. Our responsibilities 4. What we are doing 5. Employee

More information

EUROPEAN UNION. Brussels, 27 March 2013 (OR. en) 2011/0374 (COD) PE-CONS 80/12 CONSOM 164 MI 853 JUSTCIV 382 CODEC 3131 OC 774

EUROPEAN UNION. Brussels, 27 March 2013 (OR. en) 2011/0374 (COD) PE-CONS 80/12 CONSOM 164 MI 853 JUSTCIV 382 CODEC 3131 OC 774 EUROPEAN UNION THE EUROPEAN PARLIAMT THE COUNCIL Brussels, 27 March 2013 (OR. en) 2011/0374 (COD) PE-CONS 80/12 CONSOM 164 MI 853 JUSTCIV 382 CODEC 3131 OC 774 LEGISLATIVE ACTS AND OTHER INSTRUMTS Subject:

More information

PUBLIC WIFI FROM EE SOLUTION TERMS

PUBLIC WIFI FROM EE SOLUTION TERMS 1. Interpretation 1.1 The Public WiFi from EE Solution (referred to in these Solution Terms as "Public WiFi" or the "Solution") is provided in accordance with the Customer s Agreement with EE. 1.2 Solution

More information

The GDPR Are you ready?

The GDPR Are you ready? The GDPR Are you ready? kpmg.ie The GDPR - Overview The General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) will come into force from 25th May 2018, replacing the existing data protection

More information

International investment bank. International Investment Bank Compliance Policy

International investment bank. International Investment Bank Compliance Policy International investment bank International Investment Bank Compliance Policy 2016 Contents 1. GENERAL PROVISIONS... 3 1.1. Scope of application... 3 1.2. Terms and definitions... 3 1.3. Abbreviations...

More information

Information and Guidance Notes General Data Protection Regulation (GDPR) Legitimate Interest Balancing Test Assessment Template.

Information and Guidance Notes General Data Protection Regulation (GDPR) Legitimate Interest Balancing Test Assessment Template. Information and Guidance Notes General Data Protection Regulation (GDPR) Legitimate Interest Balancing Test Assessment Template. Legitimate Interest Balancing Test Assessment Template. (Legitimate Interest

More information

Information Security Roles and Responsibilities Procedure Page 1

Information Security Roles and Responsibilities Procedure Page 1 Information Security Roles and Responsibilities Procedure Reference No. xx Revision No. 2 Relevant ISO Control No. 8.1.1 Issue Date: July 17 th 2012 Revision Date: Jan 16 th 2013 Approved by: Title: Ted

More information